WordPress plugin Laika Pedigree Tree 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-4436

Name of the Vulnerable Software and Affected Versions ElementsCSS Addons for Elementor versions 1.0.8.7 and earlier Description The issue affects TheInnovs ElementsCSS Addons for Elementor, allowing Stored XSS due to improper neutralization of input during web page generation. This enables...

PT-2025-4545

Name of the Vulnerable Software and Affected Versions Eric Franklin Video Embed Optimizer versions n/a through 1.0.0 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

WordPress plugin Highlight 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Smart Custom Fields 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin...

PT-2025-4535 · Unknown · Mind Doodle Visual Sitemaps & Tasks

Name of the Vulnerable Software and Affected Versions: Mind Doodle Visual Sitemaps & Tasks versions 1.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS attacks...

WordPress plugin AddFunc Mobile Detect 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

PT-2025-4510

Name of the Vulnerable Software and Affected Versions Ben Huson List Pages at Depth versions n/a through 1.5 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject maliciou...

PT-2025-3251 · WordPress · Wp Docs

Name of the Vulnerable Software and Affected Versions: WP Docs versions n/a through 2.2.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious scripts in...

Progress Sitefinity 安全漏洞

Progress Sitefinity is an open source platform for building corporate websites and intranets from Progress, Inc. in the United States. A security vulnerability exists in Progress Sitefinity that stems from improper input neutralization during web page generation, resulting in a cross-site scripti...

PT-2025-4449

Name of the Vulnerable Software and Affected Versions FilaThemes Education LMS versions 0.0.0 through 0.0.7 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

PT-2025-4435

Name of the Vulnerable Software and Affected Versions ProductDyno versions 1.0.0 through 1.0.24 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS. Recommendations For versions 1.0.0...

WordPress plugin Alpha Price Table For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin NAVER Analytics 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-56246

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows DOM-Based XSS.This issue affects Nexter Blocks: from n/a through = 4.0.4...

CVE-2024-56242

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tyche Softwares Arconix Shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through 2.1.14...

CVE-2024-56237

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Contest Gallery Contest Gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through 24.0.3...

CVE-2024-56254

CVE-2024-56254 concerns Move Addons for Elementor. The initial description specifies an input- handling flaw that leads to a Stored XSS in Move Addons for Elementor, affecting versions from n/a up to and including 1.3.6. Connected documents corroborate the same vulnerability as a Stored Cross-Sit...

CVE-2024-56240

CVE-2024-56240 (Pronamic Google Maps) is a stored XSS in Pronamic Google Maps plugin for WordPress. Affected versions: from n/a through 2.3.2. Root cause: improper neutralization of input during web page generation. Impact per sources: confidentiality, integrity, and availability may be affected ...

CVE-2024-56025

CVE-2024-56025 : Reflected XSS in the WordPress plugin AdWork Media EZ Content Locker (adwork-media-ez-content-locker) allowing exploitation via malicious input that is not properly neutralized during web page generation. Affected: AdWork Media EZ Content Locker for WordPress, versions n/a throug...